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REMARKS 

The Specification has been amended to employ more idiomatic English. 

Claims 1-5 have been amended to eliminate the numerical references to the FIGs in the 
claims. Claims 1 and 5 have also been amended to obviate the §1 12 rejections and also to 
eliminate "means" language and operation of 35 USC 1 12 ^ (6). No new matter has been 
added by any of these amendments. 

As for the multiple dependencies objection, a Preliminary Amendment had been filed 
on August 2, 2001 eliminating the multiple dependencies from claims 3-5. None of the claims 
presented in the amendment contain multiple dependencies. 

Turing to the art rejections, the rejection of claims 1-5 under 35 USC § 103(a) as being 
unpatentable over Simmons et al., (US Patent App. Pub. 2001/0039659) in view of Patterson 
(US Patent 6,389,541) is in error. The invention relates to the selling of certain physical 
products like cigarette packs or alcohol in a supermarket, for example. These products are 
securely stored in a product delivery storage 30 (that is expediently provided beyond the cash 
desk counter). After selecting a certain product at a product selection terminal 10, which is 
provided inside the store where all the other products are offered, the customer obtains a receipt 
(document) 10 that he presents to the cashier. The encrypted information on the receipt is 
decrypted in a document reading station 22, and after payment the customer is handed an 
electronic information carrier (e.g. a smart card) enabling him to obtain the purchased product 
from the product delivery station. Simmons et al. and Patterson do not teach a method of 
selling inside a store. Rather, Simmons et al and Patterson refer to regulating the access to 
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digital contents for computer systems, i.e. virtual products like media files, obtained from 
remote content providers. 

Thus, claims 1-5 are not anticipated nor rendered obvious by Simmons et al., in view of 
Patterson. 

Having dealt with all the objections raised by the Examiner, the Application is believed 
to be in order for allowance. Early and favorable action are respectfully requested. 

In the event there are any fee deficiencies or additional fees are payable, please charge 
them (or credit any overpayment) to our Deposit Account Number 08-1391. 

Respectfully submitted, 




Norman P. Soloway 
Attorney for Applicant 
Reg. No. 24,315 
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MARKED COPY OF THE SPECIFICATION 

BACKGROUND OF THE INVENTION 

The invention relates to a method for secure data transmission in selling products m- 
which in stores. These stores contain a product selection terminal as well as a counter means 
having a document reading station, and a product delivery storage system ar e provid e d and in 
which a product is selected at the product selection terminal and a document for the selected 
product is output by means of a printer device. 

In purchasing products and especially products with higher costs or quality, the selection 
and the delivery of the products being handled in different spatial zon e s, areas of the store 
require a counterfeit-proof means of transmission of the product data is r e quir e d starting at the 
detection and th e r e of up to the authorized product delivery. 

[[From]] DE 42 17 045 Al teaches a method for selling products is known in which the 
products are stored in an automatic delivery apparatus and in which at least one product delivery 
terminal as well as a counter* are provided. In selecting the products at the product selection 
terminal* a signal s p e cific specifically for the selection is generated. After the payment of the 
product value* the counter generates a purchase document which is supplied to a reading device 
of the automatic delivery apparatus and which causes the delivery of the corresponding product 
from the automatic delivery apparatus. 

Further, [[from]] DE 695 04 729 T2 which is a translation of EP 0 670 132 Bl teaches an 
apparatus for providing packs of cigarettes at a plurality of cash desks is known wherein the 
apparatus comprises a central store room as well as a means set up on the cash desk and capable 
of performing a selection of the kind of packs, and a transport system for supplying the packs to 
the cash desk. 
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[[In the]] The known methods have the disadvantage of it is disadvantag e ous that either 
that expensive transport systems are needed hav e to b e provid e d or the purchase documents offer 
pr e s e nt an insufficient security against improper use especially for products of high e r high cost 
or quality products . 
SUMMARY OF THE INVENTION 

It is therefore an object of the invention to provide a method of th e kind m e ntioned in th e 
introduction providing secure transmission of information about purchased products in a store , 
such that one or more documents and information carriers for product identification, 
respectively, are provided with measures protected against copying and ensuring an authorized 
product delivery. 

This object is achieved by the fact that [[said]] the document is provided with a first self- 
checking encryption code and with a first algorithm for encrypting a product identification of the 
selected product or the selling identification of a selling process , wh e r e in . Additionally one or 
more selling identifications are provided on said document, that s aid and the encryption on said 
document is identified (decrypted) at the document reading station , wh e r e in th e . The value 
associated to said product is detected at the document reading station and forwarded to said 
counter means for balancing the value (payment) , that aft e r . After the payment of said product^ 
said counter means delivers an electronic information carrier by means of an output device 
connected thereto , wh e r e in said . The electronic information carrier includes a CPU generating a 
second self-checking encryption code having any encryption depth by means of a second 
algorithm for encrypting all the products being paid , wh e r e in said . The second encryption code 
[[is]] maybe different from or ev e n th e sam e as the first encryption code , and that said . The 
electronic information carrier is supplied to a reading unit in said product delivery storage in 
order to identify and to decrypt said second encryption code , wh e r e in in . In case of an 
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authorized identification the delivery of the selected product in the selected quantity from the 
product delivery storage is started. 

Advantag e ous d e v e lopm e nts of th e inv e ntion ar e indicat e d in th e claim s 2 5. 

The advantages achieved by the invention in particular consist in that a product sale is 
preferably performed with at least two information carriers which are independent with respect 
to their storage form so that a secure authorized product delivery is ensured. 

In this case A the desired product is advantag e ously selected by a customer at an electronic 
product delivery terminal arranged within a product offering zone. By means of a printing device 
associated to the product selection terminal a document serving as an information carrier is 
output representing the selected product in plain writing for the customer and at the same time 
comprising a coded and self-checking encryption which at th e b e st is to be decoded by a 
document reader. 

After the payment of the product in a counter zone an electronic information carrier is 
output to the customer by means of an output device arranged in the immediate vicinity of the 
counter. 

This information carrier may advantag e ou s ly be embodied as a transponder, as a coin- 
like chip or as a chip card, which i s also call e d i.e. a smart card. In one [[case]] embodiment , the 
information carrier advantag e ously includes a computing device (CPU) which automatically 
generates a self-checking encryption encoded by an algorithm 

In another case, the delivery means includes a computing device (CPU) for generating 
the encryption code A [[which]] this code is then stored in an information carrier arranged as a 
passive memory which possibly is may be p rotected against undesired reading by means of a 
multi-digit PIN. 
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The information carrier together with the encrypted product data is supplied to a reading 
unit contained in a product delivery storage arranged outside of the product offering zone m- 
ord e r to b e d e cod e d, wh e r e in aft e r for decoding. After a plausibility check by means of the 
corresponding algorithm f2, f2, the decryption arranges for the delivery of the selected product 
from a product delivery storage. 

The information carrier at first advantag e ously remains in the product delivery storage 
and, after its recirculation to the counter zone, may be provided at any time with a new 
encryption. 

Further, the product delivery from the product delivery storage is advantageous in that 
when additional security checks are required, for example, if alcohol or cigarettes are delivered 
according to the regulations for the legal protection for children and young persons, the- 
inhibition of the product delivery may be performed by an authorized supervisor. As a result, 
for example, an identity check may be shifted from the counter staff to the security staff. 

As a r e sult, for e xampl e , an id e ntity ch e ck may b e shift e d from th e count e r staff to th e 
s e curity staff. 

Further, since the product is coded an authorization check may already be included in the 
operation of selection at the product selection terminal. 

Advantageously, the method especially applies for counter zones in which the customer 
already can perform himself the identification of the product for the payment operation. 

Further, a coded data transmission by means of a wireless or a wired data transmission 
may advantageously be employed between the product delivery storage and the product selection 
terminal, in order to protect it against an external data manipulation (hacker attack). 
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DESCRIPTION OF THE DRAWINGS 

An embodiment of the invention is shown in the drawings and is further explained below. 
In the drawings: 

FIG. 1 shows a diagrammatic view of the method for secure data transmission in selling 
products; and 

FIG. 2 shows an explanation of the encryption method. 
DETAILED DESCRIPTION OF THE INVENTION 

In FIG. 1 the method for secure data transmission in selling products is shown in a 
diagrammatic view. 

[[Here]] In a typical store , the [[whole]] selling zone [[is]] may be divided into three 
zones: a product offering zone 1, a counter zone 2 and a product delivery zone 3. 

Various products are selected by means of a product selection terminal 10 a which is 
arrang e d s patially placed within the product offering zone 1 wh e r e by a Ajlocument printer 14 
is connected to the product selection terminal 10 to output[[s]] a document 16 i.e. a receipt . 

The product selection terminal 10 is data t e chnically electronically connected to one or 
more product delivery storages 30 arranged in the product delivery zone 2. 

The document 16 serving as an information carrier contains the selected product in plain 
writing as well as a code related at least to the sort and the quantity of the product. The code is 
possibly formed by a random number and by a self-checking number P and an algorithm ft, 
respectively [[, and]] ; this number is generated and output by a computing device CPU 12 
provided at the product selection terminal 10. 

In this case, the product identification and also the sale identification of a selling 
operation may be used for encoding. 
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At th e b e st th e The document may be output in paper form and is identified and read 
withh e ld by a document reader 22 contained in the counter means 20 when the product offering 
zone 1 is left and the product delivery zone 2 is entered . 

After balancing paving for this product, or even after balancing paving for further 
products not ordered by means of the product selection terminal, by cash paym e nt or cashless 
payment^ a delivery means 24 arranged in the counter zone 2 outputs a further information 
carrier 26. which, how e v e r, This information carrier contains its own CPU 28 and automatically 
performing an encryption of the paid products by means of a self-checking number P' and an 
algorithm f i, f2. 

The information carrier 26 may be embodied as a transponder, as a single chip or as a 
chip card (smart card). 

In a variation, how e v e r, also the delivery unit 24 may contain a CPU 28' and 
performing]] an encryption [[and]] this data is then transmitted transmitting this e ncryption to 
an information carrier 26' arranged as a passive memory. 

Additionally, the encryption may possibly be provided with a multi-digit PIN. 

In the product delivery zone 3, the information carrier 26, 26' is supplied to a reading unit 
32 of the product delivery storage 30 . The reading unit 32 decodes d e coding the encrypted 
information and initiating initiates the delivery of the selected products 40. 

The information carriers remain in the product delivery storage until they are used again. 

In this example^ a method is described in which at least two independent encryption 
methods are used, however, this is not absolutely necessary, since each encryption method may 
also be employed individually. 

Explanations An explanation is now given with respect to the method for processing and 
validating the self-checking data with the help of a self-checking number Pi containing 
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information about the purchase and the authorization with respect to the sort and the quantity of 
the selected product in view of the delivery at the delivery means 30 and the possibility of 
coding a logical sequence in a determined portion of the contained digits. 
Method: 

[[In the]] The encryption process aiming at used in the self-checking and the 
authorization-checking of the operator (final customer), th e m e thod conc e rns applies the one 
computation rule (algorithm g>) , and [[which]] the one computation rule transfers the number Xi 
consisting of m digits into the number Yi which at th e b e st preferably , but not necessarily, also 
consists of m digits. 

This encryption as well as the checking method for establishing the authenticity of the 
document may by performed at the product selection terminal for establishing th e docum e nt by 
means of a self-checking number P, and at the delivery apparatus in the counter zone with the 
information carrier 28 embodied as a chip card by means of the self-checking number F. 

It is not relevant whether in th e s e cas es the algorithms are each the same (fj and f2) or 
[[are]] different (f i and f 2 , with f i f fi and f 2 , with f 2 + f 2 ). For the self-checking operation a 
discrimination difference between these two algorithms is not absolutely necessary so that th e y 
might b e th e sam e. 

In the sp e lling As shown in FIG. 2 1 the two sets of digits of the number Xj and the 
number Yi, respectively, together compose the desired self-checking encryption number Pi (and 
P f i, respectively). 

The encryption algorithm f (i.e. fi t f 2i f i, f 2 ) may actually b e anyon e be any known 
algorithm . In particular, each known encryption algorithm, for example DES(-RSA), Rijndael, 
Elliptic Curves or the like or even each newly developed encryption algorithm or th e lik e is 
possibl e may be used in this case as far as it is unambiguous with respect to the number Yi 

7 



computed from the number X\ applied to the input . Thus, if the encryption algorithm and thus, 
i#4t composes the desired self-checking encryption number Pi, for example, by "composing" the 
digits in the order "XY" or possibly if it converts the composition to the desired number by a 
further computation. [[Then]] X then possibly contains the high-order digits and Y contains the 
low-order digits of the number P.[[, h]]However, [[also]] the inverted order (X=low-order 
digits/Y =high-order digits) is conceivable. The number of digits m has to be selected sufficiently 
high with respect to the base of the figures. 

At th e b e st Preferably, 20 digits may b e provid e d, how e v e r, also would be used by the 
encryption, but more or less digits may be provided within the scope of the encryption depth 
[[when]] if using figures as w e ll as and alphanumeric characters (A-Z; a-z) a s w e ll as and special 
characters. Here, "may be provided" in the sense of the information technology means the 
number of the used "bits per character" of the used digit, which is in particular used to ensure 
sufficient security against "lucky shots". Thus, the term "number" is merely a "wild card symbol" 
for each applicable information unit in the mathematical sense. 

Plausibility check algorithm fi checks between the generated sale information units in the 
sense of the "continued sequence" plausibility (Tortfolge"-Plausibilitat): 

Further, a second encryption function f2 is generated which is independent from the first 
with respect to the algorithm (or possibly even identical) and which exclusively generates a 
subsequent number X2 from an input number Xi in th e sam e unambiguous way . Moreover, a 
number X3 may be formed from the number X2 in th e sam e unambiguous way by performing 
another encryption . The sequence A of numbers which is produced th e r e by as is a biunique and 
reproducible sequence A . This sequence serves s e rving with each of its individual values as an 
argument Xj of the subsequent function f2 in order to generate the above-desired number Pi. 
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[[Then]]Thus, only a part of the used digits within this number X\ may or must be used 
for the plausibility check with respect to the number X(i_i) with the help of the algorithm ft. 

Th e purpo se of thi s plau s ibility ch e ck r es ults from th e consid e ration of a conc e ivabl e 
fraud proc e dur e in which a final custom e r might try with a fraudul e nt int e ntion to copy th e 
information carri e r in which is written by th e CPU 28 which is t e chnologically not impossibl e 
e v e n though v e ry difficult, in ord e r to obtain at th e product d e liv e ry unit in an unsup e rvis e d 
mann e r products in a numb e r corr e sponding to th e quantity of th e products and thus to th e 
r e produc e d information carri e r units r e sulting from th e copying op e ration, aft e r l e aving the 
count e r and th e pr e c e ding paym e nt of a singl e information carri e r unit at th e count e r. The 
purpose of the plausibility check is to stop fraud. A customer might try to copy the information 
carrier i.e. the document and use it to obtain multiple products. That is, the potential thief might 
take the information carrier and reproduce it after leaving the counter and obtain multiple copies 
of the product using the forged documents. While this type of fraud is difficult it is not 
technologically impossible so the plausibility check is necessary. 

The uniqueness of the information relevant for the sale contained in the CPU 28 within 
the scope of the continued sequence of the secret algorithm ft, {2 is thus an essential component 
of this method and cannot be separated therefrom. 

The reproducibility of the continued sequence A generated by the secret algorithm ft at 
the relevant digits is thus also a relevant component of the method and cannot be separated 
therefrom. 

Possibilities of storing information within the number X: 

A further part of the digits of the corresponding number Xi may or must be used to 
receive the information about the selected [[sort]] product and the selected quantity of this 
[[sort]] product , and possibly to receive additional information such as the legal protection for 
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children and young persons JI, h]] However, it is not necessary to include w ithout th e n e c e ssity 
of including these further digits in the plausibility check with r e sp e ct to th e us e d algorithms fr - 
and-P+. 

In this case, it is not necessary, even though not unconceivable and thus also applicable, 
that the information which is not relevant for the performance and checking operation by the 
algorithm fi (f i) is encrypted again. However, this information may be represented in plain 
writing as indicated in the example. 

Further, there is no absolute instruction concerning the ratio of the number of digits of the 
information within the number X in proportion to the number of digits of the information of the 
plausibility check done by the algorithm fi (f 1) for the correct sequence of the numbers Xj, so 
that this ratio may be anyone in so far as a sufficiently secure use of the plausibility check by the 
algorithm fi (f i) remains possible. 

It is also conceivable that this method may by applied to fixed quantities and fixed codes 
of sorts; then, there is no necessity to transmit quantities or codes or any other information, since 
merely a single product in the number one is to be sold. In this special case even all digits of the 
number X may completely be used for the plausibility check with respect to the algorithm fi (f i). 

Schemata: 

The continued application of this schema leads to the sequence P of check numbers. This 
schema may universally be described by means of the functions fj and f2 (thus, also by means of 
fi,f 2 ): 

specially: Y,=f 2 (X 1 )/generally: Y n ^ 2 QQ^\H n ^\ n } 
specially: Y 2 =fi(Xi)/generally: X (n .i)=f2(X n ):— >Xj 
each as an argument for f(x). 
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As a "starting number" (initial number) Xo for this scheme may, but does not absolutely 
have to, exist . The [[a]] number Xn may be intentionally selected by the user which, as far it is 
desired, offers a possibility to ensure the reproducibility of the sequence A of numbers by means 
of the respective algorithm f in CPU 12 and CPU 28, respectively. Alternatively a random 
number generated by computer might be used a knowl e dg e about which neith e r th e us e r nor a 
s e rvic e man nor any human b e ing in g e n e ral would hav e to hav e. 

When the "starting number" is the same in the generating CPU 12 and in the second 
checking CPU 28 and in each further CPU, then a simple further security function within the 
scope of a "plausibility check" may be realized[[:]]. 

The same starting numbers lead to the same sequences A of numbers if the algorithms are 
the same, and thus to the same sequence P of check numbers within the scope of the above- 
mentioned relevant digits of the sequence A(Xi) of numbers, but it is understood that it is 
exclusively related to the relevant digits used for the plausibility check of the continued 
sequence according to the algorithm fi (f i). 

[[As a]] In this particularly advantageous embodiment of the invention^ r es ults the 
universal possibility to code information with respect to selected quantities and selected sorts of 
products within the numbers Pi as well as to check the consistency of continued sequences of 
numbers in ord e r to inhibit fraud and improp e r u s e by th e custom e r with r e sp e ct to th e r e p e at e d 
use of alr e ady us e d s e qu e nc e s of numb e r s , is_provided if [[that]] the initial number ("starting 
number") in all CPU instances within the sequence A of numbers is the same. 

On condition Assuming that the initial number is the same in all CPU's^ each uniquely 
generated document and information carrier, respectively, which is generated in the CPU 12 as 
well as in the information carrier CPU 28, may be generated and also used only one time in this 
form for selling. 
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